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AMENDMENTS TO THE CLAIMS 

The following is a complete, marked up listing of revised claims with a status 
identifier in parentheses, underlined text indicating insertions, and strikethrough 
and/or double -bracketed text indicating deletions. 

LISTING OF CLAIMS 

1.-20. (Cancelled) 

21. (Currently Amended) A method for managing the security of at least one 
additional application associated to a main application applications with a security 
module associated to of an equipment connected via a networ k , via a network, to a 
control server managed by an operator, said applications the main application and the 
additional applications using resources as data or functions stored in the security 
module locally connected to said equipment, comprising: 

receiving via the network, by the control server, identification data including at 
least a type and software version of the equipment and an identifier of the security 
module, 

analyzing and verifying by the control server the identification data, 
generating, by the control server, a cryptogram from the result of the 

verification of the identification data, 

transmitting, by the control server, the cryptogram, via the network and the 

equipment, to the security module, 

receiving and analyzing the cryptogram by the security module, and 
selectively activating or deactivating, by the security module, at least one 

resource as data or functions of said security module by executing instructions 
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included in the cryptogram and conditioning the functioning an application of the at 
least one additional application according to criteria established by at least one of a 
supplier of said additional application, the operator and a user of the equipmen t, and 
the main application being left active for connection of the equipment to the network . 

22. (Previously Presented) The method according to claim 21, wherein the 
equipment is a mobile equipment of mobile telephony. 

23. (Previously Presented) The method according to claim 2 1 , wherein the network 
is a mobile network of the GSM, GPRS or UMTS type. 

24. (Previously Presented) A method according to claim 21, wherein the security 
module is a subscriber module of a SIM card type inserted into a mobile equipment of 
mobile telephony. 

25. (Previously Presented) The method according to claim 24, wherein the 
identification data of at least one of the mobile equipment and the subscriber module 
comprises an identifier of the mobile equipment and an identifier of the subscriber 
module pertaining to a subscriber to the mobile network. 

26. (Currently Amended) The method according to claim 21, wherein the criteria 
defines usage limits of an the additional application according to risks associated to 
the additional application and to the type and the software version of the equipment 
that at least one of the operator, the application supplier and the user of the 
equipment take in account. 
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27. (Previously Presented) The method according to claim 22, carried out after 
each connection of the mobile equipment to the network. 

28. (Previously Presented) The method according to claim 22, carried out after 
each updating of the software version of the mobile equipment. 

29. (Currently Amended) The method according to claim 22, carried out after at 
least one of each activation and deactivation of an the additional application on the 
mobile equipment. 

30. (Previously Presented) The method according to claim 24, carried out after 
each updating of the software version of the subscriber module. 

31. (Previously Presented) The method according to claim 24, carried out after 
each updating of the resources on the subscriber module. 

32. (Previously Presented) The method according to claim 21, carried out 
periodically at a rate given by the control server. 

33. (Currently Amended) The method according to claim 22, carried out after each 
initialization of an the additional application on the mobile equipment. 

34. (Previously Presented) The method according to claim 25, wherein the 
subscriber module, prior to the execution of the instructions included in the 
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cryptogram, compares the identifier of the mobile equipment with that previously 
received and only initiates analyzing an verifying by the control server of the 
identification data if the identifier of the mobile equipment has changed. 

35. (Previously Presented) The method according to claim 25, wherein the control 
server, prior to the transmission of the cryptogram, compares the identifier of the 
mobile equipment with that previously received and only initiates analyzing and 
verifying the identification data if the identifier of the mobile equipment has changed. 

36. (Previously Presented) The method according to claim 25, wherein the 
cryptogram is made up of a message encrypted by the control server with the aid of an 
asymmetrical or symmetrical encryption key from a data set containing, among other 
data, the identifier of the mobile equipment, the identifier of the subscriber module, 
resource references of the subscriber module and a predictable variable. 

37. (Previously Presented) The method according to claim 36, wherein the 
subscriber module transmits to the control server, via the mobile equipment and the 
mobile network, a confirmation message when the subscriber module has received the 
cryptogram, said message confirming correct reception and the adequate processing of 
the cryptogram by the subscriber module. 

38. (Previously Presented) The method according to claim 2 1 , wherein the 
equipment is a Pay-TV decoder or a computer to which the security module is 
connected. 
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39. (Currently Amended) A security module including resources as data or 
functions intended to be locally accessed by a main application and at least one 
additional application installed in an equipment connected to a network, the 
equipment comprising means for reading and transmitting data including at least an 
identifier of the equipment and an identifier of the security module, the security 
module further includes means for receiving and analyzing a cryptogram and means 
for selectively activating or s electively deactivating at least one resource as data or 
functions of the security module by executing instructions included in the cryptogram 
and conditioning the functioning of the at least one additional an application 
according to criteria predetermined by at least one of the supplier of said additional 
application, the operator and a user of the equipmen t, and the means for selectively 
activating or deactivating security module resources being configured for maintaining 
the main application active for connection of the equipment to the network . 

40. (Previously Presented) The security module according to claim 39, constituting 
a subscriber module of a SIM card type connected to a mobile equipment. 
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